Privacy Policy

1. Data Controller

The controller of your personal data is:

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Contact information: name, email address, phone number
• Vehicle data: brand preferences, model, body type, budget, year of manufacture and other vehicle parameters you are looking for or selling
• Communication data: content of messages you send us through forms, email or messengers (Telegram, WhatsApp, Viber)
• Technical data: IP address, browser type and version, time zone settings, operating system, device identifiers
• Website usage data: pages visited, time spent on pages, clicks, traffic source
• Messenger data: Telegram: chat ID, username, language, newsletter subscription preferences. WhatsApp/Viber: only if you contact us through these services

3. Purposes of Processing

We process your personal data for the following purposes:

• Service provision – processing your requests for vehicle selection, purchase or sale
• Communication – responding to your inquiries and informing you about order status
• Marketing – sending information about new vehicles and offers (only with your consent)
• Service improvement – analyzing website usage to improve user experience
• Security – protection against fraud, spam and abuse of our services
• Legal obligations – fulfilling legal requirements (accounting, taxes)
• Advertising – displaying relevant ads through Google Ads

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of contract (Art. 6(1)(b) GDPR): Processing is necessary to provide the services you have ordered.
• Consent (Art. 6(1)(a) GDPR): For sending marketing communications and vehicle news.
• Legitimate interest (Art. 6(1)(f) GDPR): For improving our services, ensuring website security and fraud prevention.
• Legal obligation (Art. 6(1)(c) GDPR): For fulfilling accounting and tax obligations.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose of processing:

• Order data – 10 years (accounting and tax obligations)
• Communication – 3 years from last contact
• Marketing consent – until withdrawal of consent
• Telegram subscription – until unsubscription or account deletion
• Analytics data – 26 months (Google Analytics)
• Technical logs – 30 days

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access – you can request a copy of your personal data
• Right to rectification – you can request correction of inaccurate data
• Right to erasure ("right to be forgotten") – you can request deletion of your data
• Right to restriction – you can request restriction of processing under certain conditions
• Right to data portability – you can request transfer of data to another controller
• Right to object – you can object to processing based on legitimate interest
• Right to withdraw consent – you can withdraw your consent at any time

To exercise these rights, contact us at the email address above. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device.

• Necessary cookies: Ensure basic website functionality (e.g., language preferences). Cannot be disabled.
• Analytics cookies (Google Analytics): Help us understand how visitors use the website. Collect anonymized data.
• Marketing cookies (Google Ads): Used to display relevant ads and measure their effectiveness.
• Security cookies (Google reCAPTCHA): Protect our forms from spam and automated attacks.

You can manage your cookie preferences using our cookie panel or in your browser settings.

8. Data Sharing with Third Parties

We may share your personal data with the following categories of recipients:

• Google LLC (USA): Google Analytics for traffic analysis, Google Ads for advertising, reCAPTCHA for security. Transfer to the USA is ensured by standard contractual clauses.
• Telegram FZ-LLC (Dubai): For operating Telegram bot and sending notifications. We process only chat ID and username.
• Hosting provider: For technical operation of the website.
• Government authorities: If required by law (tax office, courts).

International transfer: Some services (Google, Telegram) may transfer data outside the EU/EEA. In such cases, we ensure appropriate safeguards under Art. 46 GDPR.

9. Communication via Messengers

We offer communication through various messengers:

• Telegram Bot: When using our Telegram bot, we process: chat ID, username, preferred language and newsletter subscription preferences. You can unsubscribe at any time using /unsubscribe command.
• WhatsApp: When contacting us via WhatsApp, we process your phone number and conversation content. WhatsApp is a service of Meta Platforms Inc.
• Viber: When contacting us via Viber, we process your phone number and conversation content. Viber is a service of Rakuten Viber.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. These measures include: data transfer encryption (HTTPS), attack protection (reCAPTCHA, firewall), restricted access to data only for authorized persons, regular backups.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting the new policy on our website. We recommend checking this page regularly.

12. Right to Lodge a Complaint

If you believe that the processing of your personal data violates GDPR or Czech data protection law, you have the right to lodge a complaint with a supervisory authority:

13. Contact

If you have any questions about this policy or the processing of your personal data, contact us: